Cybersecurity Engineer RMF Specialist

SAIC is hiring an experienced Cybersecurity Engineer RMF Specialist to support cybersecurity compliance work for DoD and Federal environments. This onsite role is based at the Mark Center in Alexandria, Virginia, with a focus on Risk Management Framework (RMF) execution, authorization package development, and ongoing security monitoring using Azure-based tooling and other enterprise monitoring systems.

The position supports security assessment activities, coordinates remediation through POA and M tracking, and helps ensure documentation and evidence are ready for internal and external audits and inspections. Work is conducted Monday through Friday with onsite requirements and an Active DoD Secret security clearance.

Role Focus

• Lead and support RMF activities across all steps, from categorization through continuous monitoring.
• Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
• Create, track, and manage Plan of Action and Milestones (POA&Ms) to drive timely remediation of findings.
• Configure, interpret, and monitor security alerts and dashboards using Azure security tools, including Microsoft Defender for Cloud and Sentinel, plus other monitoring solutions such as SIEM, vulnerability scanners, and endpoint protection.
• Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
• Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
• Support continuous monitoring efforts and periodic security assessments.
• Collaborate across functions including network, cloud, applications, and operations to integrate security into system design and day-to-day operations.
• Document processes, maintain evidence, and support internal and external audits/inspections.

Required Experience and Skills

• Minimum 9 years of hands-on cybersecurity experience.
• Strong practical experience with DoD/Federal cybersecurity policy and guidance.
• Strong practical knowledge of RMF processes, documentation, and control implementation.
• Strong practical knowledge of ATO package development and sustainment.
• Experience with POA&M creation, management, and closure.
• Experience with security monitoring tools, including Azure security tools such as Microsoft Defender and Sentinel or similar offerings.
• Experience with security monitoring tools including at least one enterprise SIEM and one vulnerability management tool.
• Understanding of cloud architectures (Azure, AWS, or similar) and willingness to deepen cloud security expertise.
• Strong written and verbal communication skills, including the ability to document security posture and present findings to stakeholders.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.
• Active DoD Secret security clearance.

Education

• Masters and seven (7) years or more experience; or
• Bachelors and nine (9) years or more experience; or
• PhD or JD and four (4) years

Technologies

• Risk Management Framework (RMF)
• ATO
• System Security Plans (SSPs)
• Security Assessment Reports (SARs)
• Plan of Action and Milestones (POA&Ms)
• Microsoft Defender for Cloud
• Sentinel
• SIEM
• Vulnerability scanners
• Endpoint protection
• Azure
• AWS

Job Details

• Location: Alexandria, VA, US (onsite)
• Schedule: Full-Time
• Shift: Day Job
• Travel: Yes - 10% of the time
• Minimum Clearance Required: Secret
• Clearance Status: Active DoD Secret security clearance
• Potential for Remote Work: ORA_ON_SITE
• Target Salary Range: USD 140,001 - 180,000 per yearly
• Date Posted: 2026-11-02